Hacker GitHub

← All repos

pypa/pip

View on GitHub ↗ ★ 10,308 Python

The Python package installer

105 mentions on Hacker News by 86 people: 12 stories, 93 comments · first 2012-06-22 · latest 2026-10-22

Mentions per year 105 mentions · busiest year 2020 (17)
20082026
AllStoriesComments NewestTopOldest
  1. Seems like pip doesn't have a way to exclude packages although it was requested at least once: https://github.com/pypa/pip/issues/10797 Just checked if litellm crept in with any packages I installed recently. Fortunately it didn't, but I'm…
    comment by joshheitzman · 2026-10-22 · in Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
  2. Relevant pip issue: "Replace resolvelib with nab-resolve to do dependency resolution" @ https://github.com/pypa/pip/issues/13993 This would be a pretty big upgrade to pip and one that I'm looking forward to.
    comment by Ravencentric · 2026-09-12 · in notatallshaw/nab: PubGrub-based dependency resolver for Python packages
  3. …a pip maintainer, can you please report any issue you think is happening in recent versions of pip: https://github.com/pypa/pip/ I particularly work on performance and stability and think we've been making big strides over the last two…
    comment by notatallshaw · 2026-06-15 · in Python 3.14 garbage collection rigamarole
  4. …it's with a timestamp A PR to be able to use a relative timestamp in pip was merged just last week https://github.com/pypa/pip/pull/13837/commits
    comment by zwp · 2026-04-09 · in Open source security at Astral
  5. …unique to uv, and it's not being sent back to Astral. Here's the equivalent code in pip itself: https://github.com/pypa/pip/blob/59555f49a0916c6459755d7686a... It's providing platform information to PyPI to help track which operating…
    comment by simonw · 2026-03-23 · in Fyn: An uv fork with new features, bug fixes, stripped telemetry
  6. …regarding the "aggressive wheel-first strategy", I strongly encourage you to read the discussion on https://github.com/pypa/pip/issues/9140 .
    comment by zahlman · 2025-12-27 · in How uv got so fast
  7. …[1] with the current code base. Maintainers would have to decide which path they prefer. [1]: https://github.com/pypa/pip/issues/13111
    comment by ofek · 2025-12-26 · in How uv got so fast
  8. …Pip also generates PEP 751 lockfiles, and installing from those is on the roadmap still ( https://github.com/pypa/pip/issues/13334 ). venv is lower-level tooling. Literally all it does is create a virtual environment — the same kind that…
    comment by zahlman · 2025-10-29 · in Uv is the best thing to happen to the Python ecosystem in a decade
  9. …using a different index, and why the connection to PyPI has been properly secured since forever ( https://github.com/pypa/pip/issues/425 ; note the date). Once pip supports installation from a PEP 751 lockfile (should be very soon, by my…
    comment by zahlman · 2025-09-14 · in PyPI mirror proxy that injects code and bypasses pip hash verification
  10. …of pip and its vendored dependencies (>100 kloc), and it isn't really doing much in either case ( https://github.com/pypa/pip/blob/main/src/pip/_internal/meta... and https://github.com/pypa/pip/blob/main/src/pip/_internal/meta... ; it was…
    comment by zahlman · 2025-08-29 · in Python: The Documentary [video]
  11. …first-party package manager client that's usually distributed with Python) doesn't support it yet: https://github.com/pypa/pip/issues/12891
    comment by ameliaquining · 2025-08-21 · in The Core of Rust
  12. …than to start using --only-binary=:all: by default. (It's even been proposed as default behaviour: https://github.com/pypa/pip/issues/9140 ) Even if you can't actually install that way, it will point out the places where sdists are needed.…
    comment by zahlman · 2025-08-14 · in PYX: The next step in Python packaging
  13. …- https://github.com/pypa/packaging/issues/774 - https://github.com/pypa/setuptools/issues/3548 - https://github.com/pypa/pip/issues/7953 I relied on those for a decade, maybe two. > something no one asked for Was being a facetious, sure…
    comment by mixmastamyk · 2025-08-14 · in PYX: The next step in Python packaging
  14. …supply the XML-RPC API, and breaking them doesn't seem justifiable[1]. Edit: fixed the link. [1]: https://github.com/pypa/pip/issues/5216#issuecomment-1235329...
    comment by woodruffw · 2025-08-13 · in PYX: The next step in Python packaging
  15. …work because PyPI removed the search API. PyPI removed that API for very good reasons[1].) [1]: https://github.com/pypa/pip/issues/5216
    comment by woodruffw · 2025-08-13 · in PYX: The next step in Python packaging
  16. …it (the current pip can write such lockfiles, and installing from them is on the roadmap: https://github.com/pypa/pip/issues/13334 ). If you, like me, prefer to follow the UNIX philosophy, a complete developer toolchain in 2025 looks like:…
    comment by zahlman · 2025-06-24 · in Fun with uv and PEP 723
  17. …not on Python's own side. However, there's been some progress there recently[1]. [1]: https://github.com/pypa/pip/issues/825
    comment by woodruffw · 2025-04-22 · in Sapphire: Rust based package manager for macOS
  18. …-E <virtualenv> flag removed from pip and why? Though `pip install --python=... pkg` won't work ( https://github.com/pypa/pip/pull/12068 ), Now, there's pip --python=$VIRTUAL_ENV/bin/python install pkg
    comment by westurner · 2025-03-02 · in PEP 486 – Make the Python Launcher aware of virtual environments (2015)
  19. …main source, and then do some importlib black magic to make sure that everything uses said package. https://github.com/pypa/pip/issues/6658 https://discuss.python.org/t/what-is-the-correct-interpretat...
    comment by mardifoufs · 2025-01-12 · in Uv's killer feature is making ad-hoc environments easy
  20. …all the evolving packaging standards, going back almost the entire history of Pip. See for example https://github.com/pypa/pip/issues/1884 ; I have a long list of related reports written down somewhere. A security researcher was once…
    comment by zahlman · 2024-12-15 · in Problems with Python dependency management
  21. …to see if there's a newer version. There's an outstanding issue to add a proper "offline mode": https://github.com/pypa/pip/issues/8057 ) It doesn't need to work like that. A lot of libraries would work fine directly from the wheel,…
    comment by zahlman · 2024-11-03 · in Venvstacks: Virtual Environment Stacks for Python
  22. …building it will result in it having name and version metadata that matches what you asked for ( https://github.com/pypa/pip/issues/1884 ). This is not fixed in 24.2 btw, even if you do everything according to the latest standards - you're…
    comment by zahlman · 2024-10-09 · in PEP 760: No more bare excepts
  23. …it to download a package without installing it can cause it to run arbitrary code from setup.py - https://github.com/pypa/pip/issues/1884 and many others) that have persisted for almost the entire history of Pip. That said, I do see…
    comment by zahlman · 2024-09-24 · in Things I've learned serving on the board of the Python Software Foundation
  24. …it didn't happen, just it was an edge case on specific hardware (I am assuming it was this issue https://github.com/pypa/pip/issues/12314 ). Since it was posted a lot of work was done on areas which likely caused performance problems, and…
    comment by oblvious-earth · 2024-08-22 · in Rye and Uv: August Is Harvest Season for Python Packaging
  25. …compliant. pip also explored using it for the same reason. [1] https://github.com/astral-sh/uv [2] https://github.com/pypa/pip/pull/12580
    comment by charliermarsh · 2024-07-02 · in Python packaging scenarios by the creators of ruff
  26. …temp directory. Instead, it makes a temporary directory adjacent to the directory it is removing. ( https://github.com/pypa/pip/pull/6029 ) 5. If pip is interrupted while uninstalling, the adjacent temp directory is never deleted. So, in…
    comment by MereInterest · 2024-06-26 · in Microsoft breached antitrust rules by bundling Teams and Office, EU says
  27. …that you can paste into a "debug_wheel.py"-ish script to get unblocked in the short term, here: https://github.com/pypa/pip/issues/10793
    comment by zbentley · 2024-06-12 · in Python wheel filenames have no canonical form
  28. Unfortunately that feature is easy to break: https://github.com/pypa/pip/issues/9644
    comment by the_mitsuhiko · 2024-02-05 · in Boring Python: dependency management (2022)
  29. …is still all you need in two years' time. This is also explained in the pip documentation [4]. [1] https://github.com/pypa/pip/issues/4732 [2] https://pip-tools.readthedocs.io/en/latest/#using-hashes [3]…
    comment by ptx · 2023-05-17 · in Bun 0.6
  30. …old Python versions to dwindle. It doesn't look like the fixing effort is progressing very quickly: https://github.com/pypa/pip/issues/8606 To their credit, at least they didn't close it "works as intended" which I imagine a lot of…
    comment by IshKebab · 2023-04-15 · in Remote code execution vulnerability in Google they are not willing to fix
  31. …Also seen on Twitter [4]. [1] https://moyix.blogspot.com/2022/09/someones-been-messing-wit... [2] https://github.com/pypa/pip/issues/7325 [3] https://github.com/pypa/pip/issues/1884 [4] https://twitter.com/moyix/status/1566561433898426368
    comment by chisquared · 2023-02-20 · in TabFS – a browser extension that mounts the browser tabs as a filesystem
  32. …tangential, but... one also does not simply `pip download` if one does not want execute code - https://github.com/pypa/pip/issues/1884 . I wanted to run guarddog on source packages. Only then build them locally and install. Turns out, `pip…
    comment by aflukasz · 2023-02-19 · in One does not simply 'pip install'
  33. …anywhere. Random examples: - https://github.com/PyCQA/isort/blob/main/pyproject.toml#L100 - https://github.com/pypa/pip/blob/main/setup.py#L78 - https://github.com/11ty/eleventy/blob/master/package.json#L1...
    comment by nrvn · 2022-10-27 · in Shell script best practices, from a decade of scripting things
  34. …bunch of elbow grease). That said there are a couple exciting steps towards 658 being implemented: https://github.com/pypa/pip/pull/11111 (just approved yesterday, not yet merged) https://github.com/pypi/warehouse/issues/8254 (been open…
    comment by jbylund · 2022-09-08 · in Pypi.org is running a survey on the state of Python packaging
  35. There's currently discussion within pip to support calling pip directly: https://github.com/pypa/pip/issues/11243
    comment by dtrodrigues · 2022-07-20 · in Use `Python -m Pip`
  36. https://github.com/pypa/pip/issues/4732
    comment by throwaway234232 · 2022-07-16 · in Pipenv: Promises a Lot, Delivers Little (2020)
  37. ▲ 2
    Hyrum's Law in Action
    story by BerislavLopac · 2022-02-02 · 0 comments
  38. …solicited requirements files to weed out situations exactly like the one you describe. for example https://github.com/pypa/pip/issues/8664 if you want it improved, please report it.
    comment by minusf · 2021-12-10 · in PDM: A Modern Python Package Manager
  39. …languishes for almost a year with a broken version resolver [1]. It's so frustrating. :( :( :( [1] https://github.com/pypa/pip/issues/9187
    comment by fnord123 · 2021-07-27 · in Rust for Linux redux
  40. …stick in this case. my problem is that venv + requirements.txt is just plain simpler to use. [0] https://github.com/pypa/pip/issues
    comment by vorticalbox · 2021-07-05 · in Python Best Practices for a New Project in 2021
  41. ...until you need to use a Conda library, or until a transitive dependency suddenly breaks everything https://github.com/pypa/pip/issues/9204
    comment by dbsmith83 · 2021-06-19 · in Ask HN: Why Poetry did not become a mainstream package manager for Python?
  42. …the globe was considered fine because the new resolution behavior was "correct". Instead we got https://github.com/pypa/pip/issues/8713 back in August and then https://github.com/pypa/pip/issues/9187 in November which is pinned and still…
    comment by BugsJustFindMe · 2021-06-10 · in Did I break you? Reverse dependency verification
  43. ▲ 2
    Pypa/pip #8187: Parallelizing the Pip install process
    story by ctoth · 2021-06-08 · 0 comments
  44. That's cool! It is already possible to allow installation of many wheels in a hacky way: https://github.com/pypa/pip/issues/3969#issuecomment-2473819... But that's a pretty bad idea in most cases I guess. Good to see that Musl might be…
    comment by horstmeyer · 2021-05-10 · in Praise for Alpine Linux
  45. …right answer but this illustrates the confusion of not coalescing around an official solution. [1]: https://github.com/pypa/pipenv [2]: https://github.com/pypa/pip [3]: https://github.com/pypa/virtualenv
    comment by divbzero · 2021-04-08 · in How to make a Python package in 2021
  46. …it's necessary baked into the docs!) (3) [1] https://github.com/python-poetry/poetry/issues/697 [2] https://github.com/pypa/pip/issues/8076 [3] https://classic.yarnpkg.com/en/docs/selective-version-resolu...
    comment by macNchz · 2021-02-10 · in A Poetic Apology: Or Why Should You Use Poetry to Manage Python Dependencies
  47. …doesn’t happen? I had a quick look in pip and install order is predicated on requirements order https://github.com/pypa/pip/blob/c188d1f08f1a4a2c0a03e397f15...
    comment by CraigJPerry · 2021-02-05 · in Python’s tug of war between beginner-friendly and advanced features
  48. Doesn't look great: https://github.com/pypa/pip/issues/5216 Sounds like 'pip search' will either be deprecated, or replaced with a client side search that requires a fairly big download.
    comment by tyingq · 2021-02-01 · in Pip has dropped support for Python 2
  49. …does a `curl | python` of the "get-pip.py" bootstrap script. There's a GitHub issue about it here: https://github.com/pypa/pip/issues/9500
    comment by dmart · 2021-01-25 · in Pip has dropped support for Python 2
  50. ▲ 2
    Ignoring pip constraints during new stricter dependency resolution behaviour
    story by anewhnaccount2 · 2021-01-13 · 0 comments